Overview

overview

7

Static

static

5

2024-09-29...er.exe

windows7-x64

7

2024-09-29...er.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-09-29_c96e147010a0990b459a591c301dbf52_cryptolocker

  • Size

    39KB

  • Sample

    240929-fafpysshra

  • MD5

    c96e147010a0990b459a591c301dbf52

  • SHA1

    5d043271c47cffe3ba6d0ed61a7e7e6f868bfb4d

  • SHA256

    e073555ffc262ce9ecfb38b7b649666e4e1ce2a59bcf5b6bb931af9944184fd1

  • SHA512

    ac559e7141d0d06b30c39cf6c70740b29e5e4e741935493fba680a4b737cff97a528534ddfc1236a0e16b11120885295b408b53b079ed4c10e73bb091b41f1b3

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkIT2:qDdFJy3QMOtEvwDpjjWMl7T2

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      2024-09-29_c96e147010a0990b459a591c301dbf52_cryptolocker

    • Size

      39KB

    • MD5

      c96e147010a0990b459a591c301dbf52

    • SHA1

      5d043271c47cffe3ba6d0ed61a7e7e6f868bfb4d

    • SHA256

      e073555ffc262ce9ecfb38b7b649666e4e1ce2a59bcf5b6bb931af9944184fd1

    • SHA512

      ac559e7141d0d06b30c39cf6c70740b29e5e4e741935493fba680a4b737cff97a528534ddfc1236a0e16b11120885295b408b53b079ed4c10e73bb091b41f1b3

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkIT2:qDdFJy3QMOtEvwDpjjWMl7T2

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks